Technology Risk Principal - Technology Lifecycle Management

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

As AT&T Technology Risk Principal - Technology Lifecycle Management, you will be responsible for providing independent oversight, advisory and driving risk solutions for Technology Lifecycle Management and IT Asset Inventory processes in accordance with the Technology Risk Program. Increasing levels of regulatory requirements demand additional risk management rigor, and we must implement highly resilient, reliable, and effective solutions that meet and, in some cases, exceed performance standards found in other information rich industries.  You will provide leadership and support for Technology Risk initiatives across the business and advocate for best practices, while incorporating an independent oversight lens.  You will utilize risk-based management to integrate information and technology risk processes into the way AT&T operates.

Reporting to the Directory of Technology Risk, you will be responsible for responsible for identifying, assessing, responding to, and monitoring risks pertaining to technology changes, stability, and continuity. You will ensure that regulatory / risk policies and standards and their impact on business operations are understood and addressed consistently across AT&T, and that technology risks of new and existing technology facilities, as well as third party facilities, are assessed, monitored, and remediated as necessary. You will help to provide coverage for regulatory issues with our global technology partners and assist with regulatory exams, requests, and meetings.

Responsibilities

• Serve as the primary point of contact Technology Lifecycle Management and IT Asset Inventory processes and provide risk advisory in accordance with the Technology Risk Program and in support of compliance initiatives within respective business units / functions

• Provide advisory, as well as manage the development of Technology Risk policies, processes, frameworks and oversee the integration and implementation of proposed solutions

• Ensure IT Standards and Policies are fit for purpose and are appropriate from a regulatory, risk and compliance perspective

• Provide expertise to business units around emerging technology risk topics

• Work with applicable business, operational and IT organizations to help ensure that business and IT projects are appropriately monitored for IT risks

• Contribute to Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation and audit readiness efforts

• Support teams conducting risk and control assessments of new and existing business capabilities

• Periodically assess Technology Program capabilities and associated maturity levels to identify Program enhancement opportunities

• Develop strong relationships and interact with Senior Leadership, Business Unit Heads, Global Functions, Internal Audit, External Regulators, Legal and Compliance, Privacy and IT teams to coordinate activities

• Develop and deliver executive-level IT risk presentations to describe risk exposures and actions required

• Support Director of Technology Risk with escalation high risk observations to Technology Risk Senior leadership

• Support teams conducting risk and control assessments of new and existing business capabilities

• Represent AT&T’s interests to appropriate industry and standards forums and advise the Vice President of Technology Risk concerning topics and trends pertaining to information technology risks

Qualifications

• Preferred Bachelors degree in Information Systems, Engineering, Mathematics or equivalent experience.

• 8-10+ years of work experience in technology, operational risk management, or a related discipline at a fortune 500 company

• Significant (7+ years) experience in multiple industry risk, control and governance disciplines (e.g. Audit, Information Security, and Regulatory Compliance)

• Deep experience:

  • Management of technology lifecycle risks (e.g. planning, deployment, operations and disposal) and expertise in hardware and software asset inventory management within technology organizations or in an oversight capacity

• Experience supporting programs that effectively manage risk throughout the risk management lifecycle; including:

  • Strategic technology risk advisory

  • Risk identification, including emerging risks

  • Maturity and risk assessment, scenario analysis

  • Risk response, mainly issue remediation

  • Risk monitoring